admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-29 01:10:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-11-28T15:00:11.883436+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-11-28 15:04:04 +00:00
1 parent 1b1528f833
commit 6f74eb043e
15 files changed
+1133 -111
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2022/CVE-2022-501xx/CVE-2022-50170.json
+83 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50170",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:47.340",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-11-28T14:46:10.813",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,19 +15,96 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: kunit: executor: Se corrige una fuga de memoria en caso de fallo en kunit_filter_tests. Es posible que la asignaci\u00f3n de memoria para \"filtered\" falle, pero que la copia de la suite se realice correctamente. En este caso, la copia podr\u00eda sufrir una fuga. Libere correctamente \"copy\" en caso de error en caso de fallo en la asignaci\u00f3n de \"filtered\". Tenga en cuenta que tambi\u00e9n podr\u00eda haber existido un problema similar en kunit_filter_subsuites, antes de que se eliminara en \"kunit: flatten kunit_suite*** to kunit_suite** in .kunit_test_suites\". Esto fue informado por clang-analyzer a trav\u00e9s del robot de pruebas del kernel, aqu\u00ed: https://lore.kernel.org/all/[email protected]/ Y por smatch a trav\u00e9s de Dan Carpenter y el robot de pruebas del kernel: https://lore.kernel.org/all/[email protected]/"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.17.14",
"versionEndExcluding": "5.18",
"matchCriteriaId": "53441672-E856-4C9B-92DD-20B8133BE921"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18.3",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "7A271EA6-471F-4DDD-955D-AA1DB01A48A5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/7d69764fa3442c7615a75c6b5c02eaa1f274bccf",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/94681e289bf5d10c9db9db143d1a22d8717205c5",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a8a7e3ced362b88b659ab54239990196ff975982",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-501xx/CVE-2022-50171.json
+98 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50171",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:47.443",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-11-28T14:46:44.930",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,27 +15,117 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: crypto: hisilicon/sec - no dormir cuando est\u00e1 en softirq Cuando se utiliza el controlador de cifrado kunpeng920 para descifrar y descifrar paquetes durante softirq, no se permite utilizar el bloqueo mutex. El n\u00facleo informar\u00e1 del siguiente error: ERROR: programaci\u00f3n mientras es at\u00f3mico: swapper/57/0/0x00000300 Rastreo de llamadas: dump_backtrace+0x0/0x1e4 show_stack+0x20/0x2c dump_stack+0xd8/0x140 __schedule_bug+0x68/0x80 __schedule+0x728/0x840 schedule+0x50/0xe0 schedule_preempt_disabled+0x18/0x24 __mutex_lock.constprop.0+0x594/0x5dc __mutex_lock_slowpath+0x1c/0x30 mutex_lock+0x50/0x60 sec_request_init+0x8c/0x1a0 [hisi_sec2] sec_process+0x28/0x1ac [hisi_sec2] sec_skcipher_crypto+0xf4/0x1d4 [hisi_sec2] sec_skcipher_encrypt+0x1c/0x30 [hisi_sec2] crypto_skcipher_encrypt+0x2c/0x40 crypto_authenc_encrypt+0xc8/0xfc [authenc] crypto_aead_encrypt+0x2c/0x40 echainiv_encrypt+0x144/0x1a0 [echainiv] crypto_aead_encrypt+0x2c/0x40 esp_output_tail+0x348/0x5c0 [esp4] esp_output+0x120/0x19c [esp4] xfrm_output_one+0x25c/0x4d4 xfrm_output_resume+0x6c/0x1fc xfrm_output+0xac/0x3c0 xfrm4_output+0x64/0x130 ip_build_and_send_pkt+0x158/0x20c tcp_v4_send_synack+0xdc/0x1f0 tcp_conn_request+0x7d0/0x994 tcp_v4_conn_request+0x58/0x6c tcp_v6_conn_request+0xf0/0x100 tcp_rcv_state_process+0x1cc/0xd60 tcp_v4_do_rcv+0x10c/0x250 tcp_v4_rcv+0xfc4/0x10a4 ip_protocol_deliver_rcu+0xf4/0x200 ip_local_deliver_finish+0x58/0x70 ip_local_deliver+0x68/0x120 ip_sublist_rcv_finish+0x70/0x94 ip_list_rcv_finish.constprop.0+0x17c/0x1d0 ip_sublist_rcv+0x40/0xb0 ip_list_rcv+0x140/0x1dc __netif_receive_skb_list_core+0x154/0x28c __netif_receive_skb_list+0x120/0x1a0 netif_receive_skb_list_internal+0xe4/0x1f0 napi_complete_done+0x70/0x1f0 gro_cell_poll+0x9c/0xb0 napi_poll+0xcc/0x264 net_rx_action+0xd4/0x21c __do_softirq+0x130/0x358 irq_exit+0x11c/0x13c __handle_domain_irq+0x88/0xf0 gic_handle_irq+0x78/0x2c0 el1_irq+0xb8/0x140 arch_cpu_idle+0x18/0x40 default_idle_call+0x5c/0x1c0 cpuidle_idle_call+0x174/0x1b0 do_idle+0xc8/0x160 cpu_startup_entry+0x30/0x11c secondary_start_kernel+0x158/0x1e4 softirq: huh, entered softirq 3 NET_RX 0000000093774ee4 with preempt_count 00000100, exited with fffffe00? "
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.137",
"matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.61",
"matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/02884a4f12de11f54d4ca67a07dd1f111d96fdbd",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/16e18a8ac7c9748cf35a8d2f0ba2c6e8850e7568",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4a461ba5b9753352f438824fdd915cba675b1733",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/aa495dfe71229b9034b59d8072ff0b2325ddd5ee",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c9be45e4c69fde36522274f04d1aa0d097ae3958",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-501xx/CVE-2022-50172.json
+98 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50172",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:47.550",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-11-28T14:50:18.173",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,27 +15,117 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mt76: mt76x02u: corrige una posible p\u00e9rdida de memoria en __mt76x02u_mcu_send_msg Libera el skb si mt76u_bulk_msg falla en la rutina __mt76x02u_mcu_send_msg."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.10.137",
"matchCriteriaId": "99AC8CF0-DC39-4142-8E90-E35EC791D83F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.61",
"matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/2f53ba46d8c97aca681adbe5098e1f84580c446d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3ad958bc488e3ecb0207d31621c00efb86f17482",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/cffd93411575afd987788e2ec3cb8eaff70f0215",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/da1ab462b96c5d47a0755aec957bae3d685538c5",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f1609c4f4a21777e081b36596224802b85052ad9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-501xx/CVE-2022-50173.json
+127 -10
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50173",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:47.660",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-11-28T14:50:25.870",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,35 +15,152 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/msm/mdp5: Se corrige el retroceso del bloqueo del estado global. Necesitamos tomar el bloqueo despu\u00e9s del retorno anticipado para el caso de !hwpipe. De lo contrario, podr\u00edamos haber llegado a una contenci\u00f3n y a\u00fan as\u00ed haber devuelto 0. Corrige un problema que el nuevo material CONFIG_DRM_DEBUG_MODESET_LOCK marc\u00f3 en CI: ADVERTENCIA: CPU: 0 PID: 282 en drivers/gpu/drm/drm_modeset_lock.c:296 drm_modeset_lock+0xf8/0x154 M\u00f3dulos vinculados en: CPU: 0 PID: 282 Comm: kms_cursor_lega Tainted: GW 5.19.0-rc2-15930-g875cc8bc536a #1 Nombre del hardware: Qualcomm Technologies, Inc. DB820c (DT) pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : drm_modeset_lock+0xf8/0x154 lr : drm_atomic_get_private_obj_state+0x84/0x170 sp : ffff80000cfab6a0 x29: ffff80000cfab6a0 x28: 0000000000000000 x27: ffff000083bc4d00 x26: 0000000000000038 x25: 0000000000000000 x24: ffff80000957ca58 x23: 0000000000000000 x22: ffff000081ace080 x21: 0000000000000001 x20: ffff000081acec18 x19: ffff80000cfabb80 x18: 0000000000000038 x17: 0000000000000000 x16: 0000000000000000 x15: fffffffffffea0d0 x14: 0000000000000000 x13: 284e4f5f4e524157 x12: 5f534b434f4c5f47 x11: ffff80000a386aa8 x10: 0000000000000029 x9: ffff80000cfab610 x8: 0000000000000029 x7: 00000000000000014 x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff8000081ad904 x3 : 0000000000000029 x2 : ffff0000801db4c0 x1 : ffff80000cfabb80 x0 : ffff000081aceb58 Rastreo de llamadas: drm_modeset_lock+0xf8/0x154 drm_atomic_get_private_obj_state+0x84/0x170 mdp5_get_global_state+0x54/0x6c mdp5_pipe_release+0x2c/0xd4 mdp5_plane_atomic_check+0x2ec/0x414 drm_atomic_helper_check_planes+0xd8/0x210 drm_atomic_helper_check+0x54/0xb0 ... ---[ fin del seguimiento 0000000000000000 ]--- drm_modeset_lock intenta bloquear un bloqueo disputado sin retroceso: drm_modeset_lock+0x148/0x154 mdp5_get_global_state+0x30/0x6c mdp5_pipe_release+0x2c/0xd4 mdp5_plane_atomic_check+0x290/0x414 drm_atomic_helper_check_planes+0xd8/0x210 drm_atomic_helper_check+0x54/0xb0 drm_atomic_check_only+0x4b0/0x8f4 drm_atomic_commit+0x68/0xe0 Patchwork: https://patchwork.freedesktop.org/patch/492701/"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-667"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.19.247",
"versionEndExcluding": "4.19.256",
"matchCriteriaId": "A9D0E403-93CD-4ABF-8718-D5DAC1A93751"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.4.198",
"versionEndExcluding": "5.4.211",
"matchCriteriaId": "4C0BEDE1-12B6-4D8B-8C46-E1E2B8DAD97D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.10.121",
"versionEndExcluding": "5.10.137",
"matchCriteriaId": "786254E8-34A8-4616-B97E-78A6514A8929"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.15.46",
"versionEndExcluding": "5.15.61",
"matchCriteriaId": "F6F58692-D848-451C-BFAF-08F36BD6AD13"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.17.14",
"versionEndExcluding": "5.18",
"matchCriteriaId": "53441672-E856-4C9B-92DD-20B8133BE921"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18.3",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "7A271EA6-471F-4DDD-955D-AA1DB01A48A5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/0b07f28c23ff50a7fa5dbc3f6b3b6bd53ac9fc70",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/247f2934324f9a18d18df24ea4bfcc7d4631d0ef",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/2e34d6c8180a398de6448a93df25068bf3062042",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/2fdf5a54ef9376ff69149a48c5616f1141008c9f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/92ef86ab513593c6329d04146e61f9a670e72fc5",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/bf386c955f35a0a01bef482b6035d40ff2f6cc75",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f4e3a8c7e890049e7ba2b49ad0315dae841dfa55",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-501xx/CVE-2022-50174.json
+98 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50174",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:47.770",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-11-28T14:50:43.733",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,27 +15,117 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: hinic: evitar que el kernel se cuelgue en hinic_get_stats64(). Al usar un dispositivo hinic como un dispositivo esclavo de enlace y leer las estad\u00edsticas del dispositivo de enlace maestro, el kernel puede colgarse. El seguimiento de llamadas de p\u00e1nico del kernel es el siguiente: P\u00e1nico del kernel - no sincroniza: softlockup: tareas colgadas Seguimiento de llamadas: native_queued_spin_lock_slowpath+0x1ec/0x31c dev_get_stats+0x60/0xcc dev_seq_printf_stats+0x40/0x120 dev_seq_show+0x1c/0x40 seq_read_iter+0x3c8/0x4dc seq_read+0xe0/0x130 proc_reg_read+0xa8/0xe0 vfs_read+0xb0/0x1d4 ksys_read+0x70/0xfc __arm64_sys_read+0x20/0x30 el0_svc_common+0x88/0x234 do_el0_svc+0x2c/0x90 el0_svc+0x1c/0x30 el0_sync_handler+0xa8/0xb0 el0_sync+0x148/0x180 Y el seguimiento de llamadas de la tarea que realmente caus\u00f3 los bloqueos del kernel de la siguiente manera: __switch_to+124 __schedule+548 schedule+72 schedule_timeout+348 __down_common+188 __down+24 down+104 hinic_get_stats64+44 [hinic] dev_get_stats+92 bond_get_stats+172 [bonding] dev_get_stats+92 dev_seq_printf_stats+60 dev_seq_show+24 seq_read_iter+964 seq_read+220 proc_reg_read+164 vfs_read+172 ksys_read+108 __arm64_sys_read+28 el0_svc_common+132 do_el0_svc+40 el0_svc+24 el0_sync_handler+164 el0_sync+324 Al obtener las estad\u00edsticas del dispositivo desde Bond, el kernel llama a bond_get_stats(). Primero mantiene el bloqueo de giro bond->stats_lock y luego llama a hinic_get_stats64() para recopilar las estad\u00edsticas del dispositivo Hinic. Sin embargo, hinic_get_stats64() llama a `down(&nic_dev->mgmt_lock)` para proteger su secci\u00f3n cr\u00edtica, que podr\u00eda programar la tarea actual. Si el sistema est\u00e1 bajo alta presi\u00f3n, la tarea no se puede reactivar inmediatamente, lo que eventualmente desencadena un p\u00e1nico de bloqueo del kernel. Dado que el parche anterior reemplaz\u00f3 hinic_dev.tx_stats/rx_stats con una variable local en hinic_get_stats64(), no es necesario proteger nada con bloqueo, por lo que simplemente eliminar down()/up() est\u00e1 bien."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-667"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.14",
"versionEndExcluding": "5.10.137",
"matchCriteriaId": "703E458C-FA96-4206-8FED-8712D76DF3A8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.61",
"matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/3ba59bbe4f306bb6ee15753db0a40564c0eb7909",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/693f31dc91568e61047fd2980a8235e856cd9ce8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/98f9fcdee35add80505b6c73f72de5f750d5c03c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e74f3097a9c713ce855cda07713393bcc23a005d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fced5bce712122654ec8a20356342698cce104d2",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-501xx/CVE-2022-50175.json
+98 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50175",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:47.883",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-11-28T14:50:51.693",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,27 +15,117 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: media: tw686x: Se corrige la p\u00e9rdida de memoria en tw686x_video_init video_device_alloc() asigna memoria para vdev, cuando video_register_device() falla, no libera la memoria y provoca una p\u00e9rdida de memoria, llame a video_device_release() para solucionar esto."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.7",
"versionEndExcluding": "5.10.137",
"matchCriteriaId": "8730BA1C-A027-4111-B930-CAA87D221B13"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.61",
"matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/0597bcf774896a002edcc7934a9cdbb932b66702",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/611f86965df013d6021e6cd0d155b1734ad2cf21",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/8b412db51db24dfba22c96948580d4a12f831397",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c142a7531b90c6b0f946c82d3f504b3f36a207df",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e0b212ec9d8177d6f7c404315293f6a085d6ee42",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-501xx/CVE-2022-50177.json
+87 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50177",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:48.107",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-11-28T14:51:33.207",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,103 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: rcutorture: Correcci\u00f3n de la sincronizaci\u00f3n e iteraci\u00f3n del boosting de ksoftirqd. El boosting de prioridad de RCU puede fallar en dos situaciones: 1) Si (nr_cpus= > maxcpus=), lo que significa que el n\u00famero total de CPU es mayor que el de las que se conectaron al arranque, torture_onoff() puede reactivar posteriormente las CPU que no lo estaban. Dado que la inicializaci\u00f3n de rcutorture solo potencia los ksoftirqds de las CPU que se conectaron al arranque, las CPU que torture_onoff active posteriormente no se beneficiar\u00e1n del boosting, lo que provocar\u00e1 un fallo en el boosting de prioridad de RCU. 2) Los kthreads de ksoftirqd se impulsan tras la creaci\u00f3n de los kthreads rcu_torture_boost(), lo que abre una ventana lo suficientemente grande como para que estos kthreads rcu_torture_boost() esperen (a pesar de ejecutarse con prioridad FIFO) a los ksoftirqds que a\u00fan se ejecutan con prioridad SCHED_NORMAL. Los problemas pueden activarse, por ejemplo, con: ./kvm.sh --configs TREE01 --kconfig \"CONFIG_RCU_BOOST=y\" [ 34.968561] rcu-torture: !!! [ 34.968627] ------------[ cortar aqu\u00ed ]------------ [ 35.014054] ADVERTENCIA: CPU: 4 PID: 114 en kernel/rcu/rcutorture.c:1979 rcu_torture_stats_print+0x5ad/0x610 [ 35.052043] M\u00f3dulos vinculados en: [ 35.069138] CPU: 4 PID: 114 Comm: rcu_torture_sta No contaminado 5.18.0-rc1 #1 [ 35.096424] Nombre del hardware: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.14.0-0-g155821a-rebuilt.opensuse.org 04/01/2014 [ 35.154570] RIP: 0010:rcu_torture_stats_print+0x5ad/0x610 [ 35.198527] C\u00f3digo: 63 1b 02 00 74 02 0f 0b 48 83 3d 35 63 1b 02 00 74 02 0f 0b 48 83 3d 21 63 1b 02 00 74 02 0f 0b 48 83 3d 0d 63 1b 02 00 74 02 <0f> 0b 83 eb 01 0f 8e ba fc ff ff 0f 0b e9 b3 fc ff f82 [ 37.251049] RSP: 0000:ffffa92a0050bdf8 EFLAGS: 00010202 [ 37.277320] rcu: Descarga 8 [ 37.290367] RAX: 00000000000000000 RBX: 0000000000000001 RCX: 0000000000000001 [ 37.290387] RDX: 0000000000000000 RSI: 00000000ffffbfff RDI: 00000000ffffffff [ 37.290398] RBP: 000000000000007b R08: 0000000000000000 R09: c0000000ffffbfff [37.290407] R10: 000000000000002a R11: ffffa92a0050bc18 R12: ffffa92a0050be20 [37.290417] R13: ffffa92a0050be78 R14: 0000000000000000 R15: 000000000001bea0 [37.290427] FS: 000000000000000(0000) GS:ffff96045eb00000(0000) knlGS:0000000000000000 [37.290448] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.290460] CR2: 0000000000000000 CR3: 000000001dc0c000 CR4: 00000000000006e0 [ 37.290470] Rastreo de llamadas: [ 37.295049] [ 37.295065] ? preempt_count_add+0x63/0x90 [ 37.295095] ? _raw_spin_lock_irqsave+0x12/0x40 [ 37.295125] ? rcu_torture_stats_print+0x610/0x610 [ 37.295143] rcu_torture_stats+0x29/0x70 [ 37.295160] kthread+0xe3/0x110 [ 37.295176] ? kthread_complete_and_exit+0x20/0x20 [ 37.295193] ret_from_fork+0x22/0x30 [ 37.295218] Solucione esto potenciando los kthreads ksoftirqds desde la devoluci\u00f3n de llamada hotplug de potenciaci\u00f3n y antes de que se creen los kthreads de potenciaci\u00f3n."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.14",
"versionEndExcluding": "5.15.61",
"matchCriteriaId": "E529C2C2-B07B-4425-919F-8EC0AB91FA47"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/3002153a91a9732a6d1d0bb95138593c7da15743",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/621595f771a6bd458ffbc40679e222ba5d0a7a1e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7e7472c62c6ded322afd9d5ac8bb20a08e7c5674",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/8e84693621f53bf894af9905a6531e0530402145",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-501xx/CVE-2022-50178.json
+76 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50178",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:48.217",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-11-28T14:51:56.250",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,19 +15,89 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: rtw89: 8852a: rfk: correcci\u00f3n de la excepci\u00f3n div 0. DPK es un tipo de calibraci\u00f3n de RF cuyo algoritmo ajusta los par\u00e1metros, calibra y comprueba el resultado. Si el resultado no es lo suficientemente bueno, podr\u00eda ajustar los par\u00e1metros e intentarlo de nuevo. Este problema se produce al leer y mostrar el resultado, pero podr\u00eda ser un resultado de calibraci\u00f3n negativo que cause un divisor 0 y un volcado de memoria. Por lo tanto, se debe solucionar con phy_div(), que realiza la divisi\u00f3n solo si el divisor no es cero; de lo contrario, se adopta el valor cero. error de divisi\u00f3n: 0000 [#1] PREEMPT SMP NOPTI CPU: 1 PID: 728 Comm: wpa_supplicant No contaminado 5.10.114-16019-g462a1661811a #1 RIP: 0010:rtw8852a_dpk+0x14ae/0x288f [rtw89_core] RSP: 0018:ffffa9bb412a7520 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 00000000000180fc RDI: ffffa141d01023c0 RBP: ffffa9bb412a76a0 R08: 0000000000001319 R09: 00000000ffffff92 R10: fffffffc0292de3 R11: fffffffc00d2f51 R12: 000000000000000 R13: ffffa141d01023c0 R14: fffffffc0290250 R15: ffffa141d0102638 FS: 00007fa99f5c2740(0000) GS:ffffa142e5e80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000013e8e010 CR3: 0000000110d2c000 CR4: 0000000000750ee0 PKRU: 55555554 Rastreo de llamadas: rtw89_core_sta_add+0x95/0x9c [rtw89_core ] rtw89_ops_sta_state+0x5d/0x108 [rtw89_core ] drv_sta_state+0x115/0x66f [mac80211 ] sta_info_insert_rcu+0x45c/0x713 [mac80211 ] sta_info_insert+0xf/0x1b [mac80211 ] ieee80211_prep_connection+0x9d6/0xb0c [mac80211 ] ieee80211_mgd_auth+0x2aa/0x352 [mac80211 ] cfg80211_mlme_auth+0x160/0x1f6 [cfg80211 ] nl80211_authenticate+0x2e5/0x306 [cfg80211 ] genl_rcv_msg+0x371/0x3a1 ? nl80211_stop_sched_scan+0xe5/0xe5 [cfg80211 ] ? genl_rcv+0x36/0x36 netlink_rcv_skb+0x8a/0xf9 genl_rcv+0x28/0x36 netlink_unicast+0x27b/0x3a0 netlink_sendmsg+0x2aa/0x469 sock_sendmsg_nosec+0x49/0x4d ____sys_sendmsg+0xe5/0x213 __sys_sendmsg+0xec/0x157 ? syscall_enter_from_user_mode+0xd7/0x116 do_syscall_64+0x43/0x55 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7fa99f6e689b "
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-369"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/065e83ac83c0c0e615b96947145c85c4bd76c09a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5abc81a138f873ab55223ec674afc3a3f945d60f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/683a4647a7a3044868cfdc14c117525091b9fa0c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2025/CVE-2025-385xx/CVE-2025-38557.json
+87 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-38557",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-08-19T17:15:31.960",
"lastModified": "2025-08-20T14:40:17.713",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-28T14:41:59.877",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,103 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: HID: apple: validar el recuento de campos del informe de caracter\u00edsticas para evitar la desreferencia de puntero NULL. Un dispositivo HID malicioso con la peculiaridad APPLE_MAGIC_BACKLIGHT puede activar una desreferencia de puntero NULL mientras el informe de caracter\u00edsticas de potencia se conmuta y se env\u00eda al dispositivo en apple_magic_backlight_report_set(). Se espera que el informe de caracter\u00edsticas de potencia tenga dos campos de datos, pero si el descriptor declara un campo, entonces acceder a field[1] y desreferenciarlo en apple_magic_backlight_report_set() se vuelve inv\u00e1lido ya que field[1] ser\u00e1 NULL. Un ejemplo de un descriptor m\u00ednimo que puede causar el bloqueo es algo como lo siguiente, donde el informe con ID 3 (informe de potencia) solo hace referencia a un \u00fanico campo de 1 byte. Cuando el n\u00facleo hid analiza el descriptor, encontrar\u00e1 la etiqueta de caracter\u00edstica final, asignar\u00e1 un hid_report (todos los miembros de field[] se pondr\u00e1n a cero), crear\u00e1 una estructura de campo y la completar\u00e1, aumentando el maxfield a 1. El acceso y la desreferencia a field[1] posteriores provocan el bloqueo. P\u00e1gina de uso (definida por el proveedor 0xFF00) Uso (0x0F) Recopilaci\u00f3n (aplicaci\u00f3n) ID de informe (1) Uso (0x01) M\u00ednimo l\u00f3gico (0) M\u00e1ximo l\u00f3gico (255) Tama\u00f1o de informe (8) Cantidad de informes (1) Caracter\u00edstica (datos, variables, abs) Uso (0x02) M\u00e1ximo l\u00f3gico (32767) Tama\u00f1o de informe (16) Cantidad de informes (1) Caracter\u00edstica (datos, variables, abs) ID de informe (3) Uso (0x03) M\u00ednimo l\u00f3gico (0) M\u00e1ximo l\u00f3gico (1) Tama\u00f1o de informe (8) Cantidad de informes (1) Caracter\u00edstica (datos, variables, abs) Fin de recopilaci\u00f3n Aqu\u00ed vemos el splat de KASAN cuando el n\u00facleo desreferencia el puntero NULL y se bloquea: [ 15.164723] Ups: fallo de protecci\u00f3n general, probablemente para la direcci\u00f3n no can\u00f3nica 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 15.165691] KASAN: null-ptr-deref en el rango [0x0000000000000030-0x0000000000000037] [ 15.165691] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 No contaminado 6.15.0 #31 PREEMPT(voluntario) [ 15.165691] Nombre del hardware: PC est\u00e1ndar QEMU (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 01/04/2014 [ 15.165691] RIP: 0010:apple_magic_backlight_report_set+0xbf/0x210 [ 15.165691] Rastreo de llamadas: [ 15.165691] [ 15.165691] apple_probe+0x571/0xa20 [ 15.165691] hid_device_probe+0x2e2/0x6f0 [ 15.165691] really_probe+0x1ca/0x5c0 [ 15.165691] __driver_probe_device+0x24f/0x310 [ 15.165691] driver_probe_device+0x4a/0xd0 [ 15.165691] __device_attach_driver+0x169/0x220 [ 15.165691] bus_for_each_drv+0x118/0x1b0 [ 15.165691] __device_attach+0x1d5/0x380 [ 15.165691] device_initial_probe+0x12/0x20 [ 15.165691] bus_probe_device+0x13d/0x180 [ 15.165691] device_add+0xd87/0x1510 [...] Para solucionar este problema debemos validar el n\u00famero de campos que tienen los reportes de retroiluminaci\u00f3n y energ\u00eda y si no tienen el n\u00famero de campos requerido entonces abandonar."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.11",
"versionEndExcluding": "6.12.42",
"matchCriteriaId": "F8763925-0DBB-4581-B7CC-71A26867D63E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.13",
"versionEndExcluding": "6.15.10",
"matchCriteriaId": "5890C690-B295-40C2-9121-FF5F987E5142"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.16",
"versionEndExcluding": "6.16.1",
"matchCriteriaId": "58182352-D7DF-4CC9-841E-03C1D852C3FB"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/00896c3f41cb6b74fec853386076115ba50baf0a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/1bb3363da862e0464ec050eea2fb5472a36ad86b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7e15d1eaa88179c5185e57a38ab05fe852d0cb8d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ba08cc6801ec5fb98f2d02b5f0c614c931845325",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2025/CVE-2025-385xx/CVE-2025-38558.json
+76 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-38558",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-08-19T17:15:32.100",
"lastModified": "2025-08-20T14:40:17.713",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-28T14:42:30.450",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,19 +15,89 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: gadget: uvc: Inicializar descriptor de coincidencia de color de formato basado en frame. Se corrige el fallo del puntero nulo en uvcg_framebased_make debido a un descriptor de coincidencia de color no inicializado para el formato basado en frame, que se a\u00f1adi\u00f3 en el commit f5e7bdd34aca (\"usb: gadget: uvc: Permitir la creaci\u00f3n de nuevos descriptores de coincidencia de color\") que agreg\u00f3 el manejo para el formato sin comprimir y mjpeg. El fallo se observa cuando la configuraci\u00f3n del espacio de usuario (a trav\u00e9s de configfs) no define expl\u00edcitamente el descriptor de coincidencia de color. Si no se encuentra color_matching, config_group_find_item() devuelve NULL. El c\u00f3digo luego salta a out_put_cm, donde llama a config_item_put(color_matching);. Si color_matching es NULL, esto desreferenciar\u00e1 un puntero nulo, lo que provocar\u00e1 un fallo. [ 2.746440] No se puede manejar la desreferencia del puntero NULL del n\u00facleo en la direcci\u00f3n virtual 000000000000008c [ 2.756273] Informaci\u00f3n de aborto de memoria: [ 2.760080] ESR = 0x0000000096000005 [ 2.764872] EC = 0x25: DABT (current EL), IL = 32 bits [ 2.771068] SET = 0, FnV = 0 [ 2.771069] EA = 0, S1PTW = 0 [ 2.771070] FSC = 0x05: level 1 translation fault [ 2.771071] Data abort info: [ 2.771072] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 2.771073] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 2.771074] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 2.771075] user pgtable: 4k pages, 39-bit VAs, pgdp=00000000a3e59000 [ 2.771077] [000000000000008c] pgd=0000000000000000, p4d=0000000000000000, pud=0000000000000000 [ 2.771081] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP [ 2.771084] Dumping ftrace buffer: [ 2.771085] (ftrace buffer empty) [ 2.771138] CPU: 7 PID: 486 Comm: ln Tainted: G W E 6.6.58-android15 [ 2.771139] Hardware name: Qualcomm Technologies, Inc. SunP QRD HDK (DT) [ 2.771140] pstate: 61400005 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 2.771141] pc : __uvcg_fill_strm+0x198/0x2cc [ 2.771145] lr : __uvcg_iter_strm_cls+0xc8/0x17c [ 2.771146] sp : ffffffc08140bbb0 [ 2.771146] x29: ffffffc08140bbb0 x28: ffffff803bc81380 x27: ffffff8023bbd250 [ 2.771147] x26: ffffff8023bbd250 x25: ffffff803c361348 x24: ffffff803d8e6768 [ 2.771148] x23: 0000000000000004 x22: 0000000000000003 x21: ffffffc08140bc48 [ 2.771149] x20: 0000000000000000 x19: ffffffc08140bc48 x18: ffffffe9f8cf4a00 [ 2.771150] x17: 000000001bf64ec3 x16: 000000001bf64ec3 x15: ffffff8023bbd250 [ 2.771151] x14: 000000000000000f x13: 004c4b40000f4240 x12: 000a2c2a00051615 [ 2.771152] x11: 000000000000004f x10: ffffffe9f76b40ec x9 : ffffffe9f7e389d0 [ 2.771153] x8 : ffffff803d0d31ce x7 : 000f4240000a2c2a x6 : 0005161500028b0a [ 2.771154] x5 : ffffff803d0d31ce x4 : 0000000000000003 x3 : 0000000000000000 [ 2.771155] x2 : ffffffc08140bc50 x1 : ffffffc08140bc48 x0 : 0000000000000000 [ 2.771156] Call trace: [ 2.771157] __uvcg_fill_strm+0x198/0x2cc [ 2.771157] __uvcg_iter_strm_cls+0xc8/0x17c [ 2.771158] uvcg_streaming_class_allow_link+0x240/0x290 [ 2.771159] configfs_symlink+0x1f8/0x630 [ 2.771161] vfs_symlink+0x114/0x1a0 [ 2.771163] do_symlinkat+0x94/0x28c [ 2.771164] __arm64_sys_symlinkat+0x54/0x70 [ 2.771164] invoke_syscall+0x58/0x114 [ 2.771166] el0_svc_common+0x80/0xe0 [ 2.771168] do_el0_svc+0x1c/0x28 [ 2.771169] el0_svc+0x3c/0x70 [ 2.771172] el0t_64_sync_handler+0x68/0xbc [ 2.771173] el0t_64_sync+0x1a8/0x1ac Inicializa el descriptor de coincidencia de color para el formato basado en frame para evitar el bloqueo del puntero NULL reflejando el manejo realizado para los formatos sin comprimir y mjpeg."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.13",
"versionEndExcluding": "6.15.10",
"matchCriteriaId": "5890C690-B295-40C2-9121-FF5F987E5142"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.16",
"versionEndExcluding": "6.16.1",
"matchCriteriaId": "58182352-D7DF-4CC9-841E-03C1D852C3FB"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/323a80a1a5ace319a722909c006d5bdb2a35d273",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/6db61c1aa23075eeee90e083ca3f6567a5635da6",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7f8576fc9d1a203d12474bf52710c7af68cae490",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2025/CVE-2025-385xx/CVE-2025-38559.json
+87 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-38559",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-08-19T17:15:32.233",
"lastModified": "2025-08-20T14:40:17.713",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-28T14:42:44.980",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,103 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: platform/x86/intel/pmt: correcci\u00f3n de un acceso a puntero nulo en el registro de fallos. El uso de intel_pmt_read() para sistemas binarios sysfs requiere un pcidev. El uso actual del valor del endpoint solo es v\u00e1lido para el uso de endpoints de telemetr\u00eda. Sin el ep, el uso del registro de fallos provoca la siguiente excepci\u00f3n de puntero nulo: ERROR: desreferencia de puntero nulo del kernel, direcci\u00f3n: 0000000000000000 \u00a1Uy!: \u00a1Uy!: 0000 [#1] SMP NOPTI RIP: 0010:intel_pmt_read+0x3b/0x70 [pmt_class] C\u00f3digo: Seguimiento de llamadas: ? Aumente la estructura intel_pmt_entry con un puntero a pcidev para evitar la excepci\u00f3n del puntero NULL."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.12",
"versionEndExcluding": "6.12.42",
"matchCriteriaId": "1FC3F76F-C8CF-4B19-AC3D-AA1AE05558D7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.13",
"versionEndExcluding": "6.15.10",
"matchCriteriaId": "5890C690-B295-40C2-9121-FF5F987E5142"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.16",
"versionEndExcluding": "6.16.1",
"matchCriteriaId": "58182352-D7DF-4CC9-841E-03C1D852C3FB"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/089d05266b2caf020ac2ae2cd2be78f580268f5d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/18d53b543b5447478e259c96ca4688393f327c98",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/54d5cd4719c5e87f33d271c9ac2e393147d934f8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/860d93bd6a21f08883711196344c353bc3936a2b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2025/CVE-2025-385xx/CVE-2025-38564.json
+76 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-38564",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-08-19T17:15:32.933",
"lastModified": "2025-08-20T14:40:17.713",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-28T14:44:02.133",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,19 +15,89 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: perf/core: Manejar el error de mapeo de b\u00fafer correctamente en perf_mmap() Despu\u00e9s de la asignaci\u00f3n exitosa de un b\u00fafer o una conexi\u00f3n exitosa a un b\u00fafer existente, perf_mmap() intenta mapear el b\u00fafer de solo lectura en la tabla de p\u00e1ginas. Si eso falla, las entradas de la tabla de p\u00e1ginas ya configuradas se eliminan, pero los otros efectos secundarios espec\u00edficos de perf de ese fallo no se manejan. El c\u00f3digo de llamada simplemente limpia el VMA y no invoca perf_mmap_close(). Esto filtra los recuentos de referencia, corrompe la contabilidad de usuario->vm y tambi\u00e9n resulta en una invocaci\u00f3n desequilibrada de event::event_mapped(). Solucione esto moviendo la invocaci\u00f3n de event::event_mapped() antes de la llamada a map_range() para que en el fallo de map_range() se pueda invocar perf_mmap_close() sin causar una llamada desequilibrada a event::event_unmapped(). perf_mmap_close() deshace los recuentos de referencia y eventualmente libera los b\u00faferes."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.14",
"versionEndExcluding": "6.15.10",
"matchCriteriaId": "70478C0C-058C-4CC8-99CB-6F578E74194C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.16",
"versionEndExcluding": "6.16.1",
"matchCriteriaId": "58182352-D7DF-4CC9-841E-03C1D852C3FB"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/831e1c90a5d72e6977a57c44f47c46b73a438695",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a9025f73c88d9d6e125743a43afc569da3ce5328",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f74b9f4ba63ffdf597aaaa6cad7e284cb8e04820",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2025/CVE-2025-49xx/CVE-2025-4953.json
+9 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-4953",
"sourceIdentifier": "[email protected]",
"published": "2025-09-16T15:15:45.313",
"lastModified": "2025-11-21T07:15:52.797",
"lastModified": "2025-11-28T13:15:46.000",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -48,6 +48,10 @@
}
],
"references": [
{
"url": "https://access.redhat.com/errata/RHSA-2024:8690",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:15904",
"source": "[email protected]"
@@ -64,6 +68,10 @@
"url": "https://access.redhat.com/errata/RHSA-2025:17669",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:2703",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2025-4953",
"source": "[email protected]"
README.md
+17 -7
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-11-28T13:00:11.556249+00:00
2025-11-28T15:00:11.883436+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-11-28T12:16:03.350000+00:00
2025-11-28T14:51:56.250000+00:00
```
### Last Data Feed Release
@@ -38,17 +38,27 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### CVEs added in the last Commit
Recently added CVEs: `1`
Recently added CVEs: `0`
- [CVE-2025-12143](CVE-2025/CVE-2025-121xx/CVE-2025-12143.json) (`2025-11-28T12:16:03.350`)
### CVEs modified in the last Commit
Recently modified CVEs: `2`
Recently modified CVEs: `13`
- [CVE-2023-48796](CVE-2023/CVE-2023-487xx/CVE-2023-48796.json) (`2025-11-28T11:15:59.537`)
- [CVE-2025-27151](CVE-2025/CVE-2025-271xx/CVE-2025-27151.json) (`2025-11-28T11:32:52.877`)
- [CVE-2022-50170](CVE-2022/CVE-2022-501xx/CVE-2022-50170.json) (`2025-11-28T14:46:10.813`)
- [CVE-2022-50171](CVE-2022/CVE-2022-501xx/CVE-2022-50171.json) (`2025-11-28T14:46:44.930`)
- [CVE-2022-50172](CVE-2022/CVE-2022-501xx/CVE-2022-50172.json) (`2025-11-28T14:50:18.173`)
- [CVE-2022-50173](CVE-2022/CVE-2022-501xx/CVE-2022-50173.json) (`2025-11-28T14:50:25.870`)
- [CVE-2022-50174](CVE-2022/CVE-2022-501xx/CVE-2022-50174.json) (`2025-11-28T14:50:43.733`)
- [CVE-2022-50175](CVE-2022/CVE-2022-501xx/CVE-2022-50175.json) (`2025-11-28T14:50:51.693`)
- [CVE-2022-50177](CVE-2022/CVE-2022-501xx/CVE-2022-50177.json) (`2025-11-28T14:51:33.207`)
- [CVE-2022-50178](CVE-2022/CVE-2022-501xx/CVE-2022-50178.json) (`2025-11-28T14:51:56.250`)
- [CVE-2025-38557](CVE-2025/CVE-2025-385xx/CVE-2025-38557.json) (`2025-11-28T14:41:59.877`)
- [CVE-2025-38558](CVE-2025/CVE-2025-385xx/CVE-2025-38558.json) (`2025-11-28T14:42:30.450`)
- [CVE-2025-38559](CVE-2025/CVE-2025-385xx/CVE-2025-38559.json) (`2025-11-28T14:42:44.980`)
- [CVE-2025-38564](CVE-2025/CVE-2025-385xx/CVE-2025-38564.json) (`2025-11-28T14:44:02.133`)
- [CVE-2025-4953](CVE-2025/CVE-2025-49xx/CVE-2025-4953.json) (`2025-11-28T13:15:46.000`)
## Download and Usage
_state.csv
+16 -16
View File
@@ -215067,15 +215067,15 @@ CVE-2022-50166,0,0,0357e57fa6bd7242060dcb299371281cca72b0ee2a02fc04e2ee9f12852a6
CVE-2022-50167,0,0,d685c1c8aa87eadd6e75176026fcfbc57935d57c444d3165c40b062e3f34d1a5,2025-11-17T19:48:41.020000
CVE-2022-50168,0,0,06cbdb402d2a6f77337f69915d8a2815b8590ba61085b83c4a6d0d7fc79d8f57,2025-06-18T13:47:40.833000
CVE-2022-50169,0,0,19ad8a9c3d29922339edb8bc8f67b1893f81fecaf1f53a6ec7cf05df67eac0d8,2025-06-18T13:47:40.833000
CVE-2022-50170,0,0,0952e3f4a6a7ed4a9d33365548ffb3184495a435e4b22b49ce8bc160d1e81812,2025-06-18T13:47:40.833000
CVE-2022-50171,0,0,b1c2d0f503017f670994f9e28e7b4dfe7182ce510a2c3e2ebcb04fda3fd21bac,2025-06-18T13:47:40.833000
CVE-2022-50172,0,0,d8f3558861088a3e76e53ec286ffcb18dd225a7c8da2bfc05e247ee6f152f68d,2025-06-18T13:47:40.833000
CVE-2022-50173,0,0,6c09d70669435aa18d828796ca2d42f3ebabc3190c68f770b768c6a91e7d9b53,2025-06-18T13:47:40.833000
CVE-2022-50174,0,0,e1dc4e93ff7d2f1b93da9b4ff4d738f715f770849e782ffc82f5ae5d4b6a3d03,2025-06-18T13:47:40.833000
CVE-2022-50175,0,0,fefc4ef306a1b66681c7cbf3f91e5f7d910053866a169cb12e5a37db8606b47f,2025-06-18T13:47:40.833000
CVE-2022-50170,0,1,dcd151bcc5d3224351484da958703bebc9c3aeee8da57cd2f7b6e57a68486362,2025-11-28T14:46:10.813000
CVE-2022-50171,0,1,42c450e8fdf7ab2d71d0705312c62452eb8a9cedbb53c89c3a111d6f32d41639,2025-11-28T14:46:44.930000
CVE-2022-50172,0,1,bf35a062fbfdb0b1a6cab475787a5e4a68390100dc910653490c71ebc0d37af2,2025-11-28T14:50:18.173000
CVE-2022-50173,0,1,169a0a0488403115102d1cc4bffacbe47906ce1b117b67ed7007c41212f42e7f,2025-11-28T14:50:25.870000
CVE-2022-50174,0,1,c0007b903843236046eb1e7291509ba6c4157d1ada0d0f3624d0eebc432d9e77,2025-11-28T14:50:43.733000
CVE-2022-50175,0,1,6c9d26700b8b0bf4d04b357613c938edc8f31b8ad045f295cb0c1cb4f70d2cc6,2025-11-28T14:50:51.693000
CVE-2022-50176,0,0,fd8780a6cc0571e1808e86658fa59709937802a887f122fd33d61eae3690538b,2025-11-25T20:22:31.863000
CVE-2022-50177,0,0,935a99e0884541d507ebafdbc858d77228a4c117bd4c789946eeee70ac87d14c,2025-06-18T13:47:40.833000
CVE-2022-50178,0,0,c64913e6a55b2f52a9e04b6a62ac7f8d870cfbcabcbeb69f527effef3e20ea7e,2025-06-18T13:47:40.833000
CVE-2022-50177,0,1,26c33745229b34101effd6b77ee95f2d45a799ccf38a186173f7cb1463b5f8ec,2025-11-28T14:51:33.207000
CVE-2022-50178,0,1,1f6ccccb2a6d96828dbed97299045e65dde08379d6c7a8c167bff4435040da41,2025-11-28T14:51:56.250000
CVE-2022-50179,0,0,e3e468e4606b747c0269a6ac7e4c9b4653bdc60d2cefe09f3770a09b88837a78,2025-11-20T22:02:06.180000
CVE-2022-50180,0,0,5911e07ce2458b7afa6996acfa5b5c49cee9423f63c84187063247cf93f71f5f,2025-06-18T14:15:24.327000
CVE-2022-50181,0,0,864cab8e3b917a11c49b3cc8952d6b4d06013b54f895124a8e39c7318b0f60c0,2025-11-20T22:05:33.677000
@@ -240218,7 +240218,7 @@ CVE-2023-48791,0,0,31c96e4e1869546f12717fd141d38efd00e2ed04c54f4d96999394432c372
CVE-2023-48792,0,0,33638a16be59b3c3f04ec2d2edfb09f5d97719cb7d6fc1abec0d274b80694bcb,2025-06-11T17:15:34.457000
CVE-2023-48793,0,0,e4ee439dad1d9f1bf654fa529593f91997d37297a6b500770f89a0a5be5a054b,2025-06-11T17:15:34.760000
CVE-2023-48795,0,0,d141b44e0378fc86fb9a777239caaee21ce39e9b10455a5df43546019ef22045,2025-11-04T22:15:55.110000
CVE-2023-48796,0,1,d5a64cbd64ed0378c87a39a7e8ebc22c9c9adc7392de0a33b3a8fc4c15228c4c,2025-11-28T11:15:59.537000
CVE-2023-48796,0,0,d5a64cbd64ed0378c87a39a7e8ebc22c9c9adc7392de0a33b3a8fc4c15228c4c,2025-11-28T11:15:59.537000
CVE-2023-48799,0,0,3366d8319742c0309ab654ef0cc53e45e278748d34ca982988839dd619d2d037,2024-11-21T08:32:27.993000
CVE-2023-48800,0,0,17e06be6dffafd740719d49b31b1019db69763093cb965efa845b4d818b5fbc6,2024-11-21T08:32:28.150000
CVE-2023-48801,0,0,a31cee78c37ef4b212059889b73df5629425acf8b3301c071d38645e584e899b,2024-11-21T08:32:28.310000
@@ -287513,7 +287513,7 @@ CVE-2025-12139,0,0,e63f0884149ad42d0872828f90ca0056e111fbe786c9a025eb19d6a900295
CVE-2025-1214,0,0,83319e6848e0d35529b73705b5faa8457da95445a9a7e676376a76f2db06307e,2025-10-17T15:18:02.913000
CVE-2025-12140,0,0,0a2fb1f09fe84a39d81f16bf2b2e9e1ecd7b1ce7bd00b1af8319fbbc65373c1c,2025-11-27T14:15:50.813000
CVE-2025-12142,0,0,5113c9770bd129f3f313d8af57f92292eeec384f8666192aef43b4c53dfdf175,2025-10-30T15:03:13.440000
CVE-2025-12143,1,1,12f789077b09b7a08c2ad54b9dea6a2322fbaf63eb479342eef95fd6f83d63fc,2025-11-28T12:16:03.350000
CVE-2025-12143,0,0,12f789077b09b7a08c2ad54b9dea6a2322fbaf63eb479342eef95fd6f83d63fc,2025-11-28T12:16:03.350000
CVE-2025-12147,0,0,4b650092d3b6e630c6eef4a3fd04a61cce7d21291bb149508189d09ae5b41543,2025-10-30T15:03:13.440000
CVE-2025-12148,0,0,15664fc1e11bd7cc7e754e848b7c78051d528efd7fb6991d874f53d675e75574,2025-10-30T15:03:13.440000
CVE-2025-12149,0,0,53a42d6fbb30f206a7535a87aa75c31aef52932ef0e390c43a76403ccad7624f,2025-11-14T17:15:59.060000
@@ -295297,7 +295297,7 @@ CVE-2025-27148,0,0,a02be6d0e91bf8eda3626965312087a36b8be8d291da209d00439f9926ccc
CVE-2025-27149,0,0,d37dd60e9f4cbd6bf258f9e4281ccbeeea11611cacc6f6c7f578aee7a519d621,2025-09-27T00:15:56.530000
CVE-2025-2715,0,0,9b86d209899e100764be1390e15dd32c759d3c6ac90bee191f2f3abd07adc820,2025-03-27T16:45:46.410000
CVE-2025-27150,0,0,ed69fdfc840c58bb15950fe3ab99a4797846fbbb445dad305aecfb4847ed9dba,2025-08-22T15:53:42.620000
CVE-2025-27151,0,1,45d6f93d7241c78d364346d306638821fc533cbdbdf847af227d70fd72902ca8,2025-11-28T11:32:52.877000
CVE-2025-27151,0,0,45d6f93d7241c78d364346d306638821fc533cbdbdf847af227d70fd72902ca8,2025-11-28T11:32:52.877000
CVE-2025-27152,0,0,dd09dee37591f16389af8cf97e0b7fe61eddc8d2b998b403935ec96b886910fa,2025-11-25T17:58:17.213000
CVE-2025-27153,0,0,153cf8367ada5823ec25665e9d6c2fdf2d2f49b909a08cc18d9c03f87f5c3ef3,2025-07-03T15:14:12.767000
CVE-2025-27154,0,0,1e975d72bebdf47d7d7a2300b98253c7dc68fea542f552a8278b41ed85b5f742,2025-04-07T18:24:53.463000
@@ -301806,15 +301806,15 @@ CVE-2025-38553,0,0,2d6f39c2c7d776b188d9221c48b26ebc0f7c8fff0d4331bd8c19e5c795a04
CVE-2025-38554,0,0,1b6b157b7b1ad624571b786bcf255c53f44cdb4f1a10c6637f3737f397ba5ada,2025-11-18T17:59:40.800000
CVE-2025-38555,0,0,ce55c1384cdf7ed457f5762c53ff63f05b01c9f26ff4fd6a972cf040bc2d8875,2025-11-03T18:16:29
CVE-2025-38556,0,0,443b2c8ceae5016ad25ac497ad1cda9f4180123f84889ac9d202e3303eed3a1f,2025-11-18T17:59:48.710000
CVE-2025-38557,0,0,1ca4412bf440568e879cc0a6a8b74ba9d3e66e13213dce559ba4a2d4f2ddaeb1,2025-08-20T14:40:17.713000
CVE-2025-38558,0,0,702b2bba05f67460746c2e06da4e7886a2442df74d3a6eed76458dd1e3f4b433,2025-08-20T14:40:17.713000
CVE-2025-38559,0,0,1dec387be68d626e634248f45bf1dd276c210058a067e3d69c298762bbdff010,2025-08-20T14:40:17.713000
CVE-2025-38557,0,1,5c75827517975cf7716853fec4f7681ba4db9d18c4bb05fee09b48fa81d46865,2025-11-28T14:41:59.877000
CVE-2025-38558,0,1,c45c72481f049f87eb3ed04ce832882eba161a3da3718c9dae7f12d83b285cd6,2025-11-28T14:42:30.450000
CVE-2025-38559,0,1,a997828985df06fd026b4951c3a5e64d95835f1637c72dd7e3098dc335388f62,2025-11-28T14:42:44.980000
CVE-2025-3856,0,0,9c3d59c08091e1da68ea94b9405a06c796925b8f71ee3eaba680d320cdfafb01,2025-10-15T18:49:12.557000
CVE-2025-38560,0,0,72f17f1ee0921eb9bbaad08e65b6f097ae3e65b51f8fc04a44c509c491855f78,2025-11-03T18:16:29.120000
CVE-2025-38561,0,0,ec864e82f47a39f5074466375d59738a21a8605cc90a17c33321c7d8ef7069dc,2025-11-03T18:16:29.223000
CVE-2025-38562,0,0,91c2300dd0663c177c22682667da46a604cd69ba247e0d8c1277773f03ba3e9e,2025-11-03T18:16:29.377000
CVE-2025-38563,0,0,f630d0cb2ac120ad6f47e655735612b99d270d4cc075617f608f0a4f5c291c36,2025-11-03T18:16:29.483000
CVE-2025-38564,0,0,69f206c527b7ea4a1886c5ab10e9fd29538395089344b5070fc7336986a09a59,2025-08-20T14:40:17.713000
CVE-2025-38564,0,1,a2e12d8b1b64c890fb566160e543251e3a3de737b897e60d096a1264a1a2ebfc,2025-11-28T14:44:02.133000
CVE-2025-38565,0,0,36bf72e64474c88775ca47121d25ab2304d794d3485c1ec56f26b7b8f72e49a5,2025-11-03T18:16:29.600000
CVE-2025-38566,0,0,1f61085c654aee3a6ca3f843a0d479e4e64abb979db657c1999cdd4ebfb9416f,2025-11-26T18:15:05.167000
CVE-2025-38567,0,0,be82ccd9ce13eb3ef236303b11fe339a619f8d65d115dca311ff3b36a56a28b8,2025-11-26T20:05:59.707000
@@ -307827,7 +307827,7 @@ CVE-2025-49526,0,0,cb3e92f9a5186bf0edc437308d68d5816cfe08756626ea06ae8de84bd2b5c
CVE-2025-49527,0,0,55754d12c0075fd8194634dc8323b83dfb44278b2522a6508b3a62a93ab12aac,2025-07-10T17:38:21.650000
CVE-2025-49528,0,0,7213ba3b6cc61f452d26024654faf0973e8491c7ccf616863445ebd734c95d92,2025-07-10T17:38:11.023000
CVE-2025-49529,0,0,1a48a968149067e4b3bf327b864ef50fcef597f378d51b40c87a5065cc2eb915,2025-07-10T17:38:01.050000
CVE-2025-4953,0,0,45cd237057ef94874c4e2404bd0bb4922217293702e3c7c0e3e5338e37e1a709,2025-11-21T07:15:52.797000
CVE-2025-4953,0,1,b50ec9d81f8dbaea00148fe3ec793f8bdef9ea044750a0b6bf86661d4018093d,2025-11-28T13:15:46
CVE-2025-49530,0,0,3a92f2037b8f17168102ba3c41776ba20f364461e6b5a91b6671eb65167f0b88,2025-07-10T17:37:50.727000
CVE-2025-49531,0,0,13d4c9d82e3f090fb92010adb14a3f91c18b56fd0aecbbb3e1ed111178cb599e,2025-07-10T17:31:14.520000
CVE-2025-49532,0,0,ebf6a6e2a5bc5be9a8816ea107b6ea0652fcbb804339788526c44347041ad8b2,2025-07-10T17:40:51.393000
Can't render this file because it is too large.